Problem with MySQL and Accouting-On record
Ángel L. Mateo
amateo at um.es
Fri Nov 13 10:15:24 CET 2020
I'm afraid that the patch doesn't work with my config. I have run the
same problem test with the patch applied (now I'm running 3.0.21 with
the patch)
1. Start freeradius
2. Send accounting start record for one user (request (1)). This record
is stored in mysql and deleted from the buffered file. This NAS
(155.54.213.5) is different than the one sending Accouting-On packets
(155.54.213.6)
3. Send "Accouting-On" packet from other NAS than previous (request (2)
and (3)). This request updates no record (line 3267) and is not deleted
from the buffered file. It doesn't update any record because I don't any
record stored from this NAS, so it's correct not to update any record.
4. Send accouting stop record for the previous user (request (4) and
(5)). This request is never been processed from buffered files.
After step 3, there is a eduroam_sql.work file with the content of the
"Accounting-On" request. And after step 4, there is also a eduroam_sql
file with the content of the Stop request, and the eduroam_sql.work is
still there with the same content (Accounting-On).
I guess the "SELECT true" statement doesn't make the desire behaviour.
This is what is shown in the debug (the whole debug in in the attached
debug.txt file):
(3) sql: Executing query: UPDATE radacct SET acctstoptime =
FROM_UNIXTIME(1605258058), acctsessiontime = '1605258058' -
UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE
acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND
acctstarttime <= FROM_UNIXTIME(1605258058)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(3) sql: SQL query returned: success
(3) sql: 0 record(s) updated
(3) sql: Trying next query...
(3) sql: EXPAND SELECT true
(3) sql: --> SELECT true
(3) sql: Executing query: SELECT true
(3) sql: SQL query returned: success
(3) sql: -1 record(s) updated
(3) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(3) [sql] = noop
(3) } # accounting = noop
To run the test, I'm sending accounting packets with radclient from the
localhost, not from the real NAS. I have also attached the files with
packets I'm sending. The command I use is:
cat acct_stop.txt | radclient -d /etc/freeradius/3.0/ -x localhost:1813
acct <SECRET>
El 12/11/20 a las 14:42, Alan DeKok escribió:
>
> On Nov 12, 2020, at 8:01 AM, Ángel L. Mateo <amateo at um.es> wrote:
>> Is there any place where I can take it and apply to my installation? I can't find it at github. I don't know if it isn't there or that I don't find it.
>
> You can just download the updated file here:
>
> https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/mods-config/sql/main/mysql/queries.conf
>
>>> This kind of feedback is *exactly* what I need in order to find and fix problems.
>> I'm sorry about not providing the correct information since the beginning.
>
> Thanks. It's why I'm so fanatical about asking for the debug output. Nothing else really helps.
>
>> Thank you for your help.
>
> Despite my general crankiness, it's what I do. You're welcome/
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información
y las Comunicaciones Aplicadas (ATICA)
http://www.um.es/atica
Tfo: 868889150
Fax: 868888337
-------------- next part --------------
FreeRADIUS Version 3.0.21
Copyright (C) 1999-2019 The FreeRADIUS server project and contributors
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License
For more information about these matters, see the file named COPYRIGHT
Starting - reading configuration files ...
including dictionary file /usr/share/freeradius/dictionary
including dictionary file /usr/share/freeradius/dictionary.dhcp
including dictionary file /usr/share/freeradius/dictionary.vqp
including dictionary file /etc/freeradius/3.0/dictionary
including configuration file /etc/freeradius/3.0/radiusd.conf
including configuration file /etc/freeradius/3.0/proxy.conf
including files in directory /etc/freeradius/3.0/clients.d/
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod9.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod8.conf
including configuration file /etc/freeradius/3.0/clients.d/inanna.conf
including configuration file /etc/freeradius/3.0/clients.d/pbxapp.conf
including configuration file /etc/freeradius/3.0/clients.d/sestertium-desa.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod6.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod10.conf
including configuration file /etc/freeradius/3.0/clients.d/cloto.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod11.conf
including configuration file /etc/freeradius/3.0/clients.d/vpn-mikrotik-ccr-1.conf
including configuration file /etc/freeradius/3.0/clients.d/arrixaca.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod1.conf
including configuration file /etc/freeradius/3.0/clients.d/sestertium2.conf
including configuration file /etc/freeradius/3.0/clients.d/histclinicpruebas.conf
including configuration file /etc/freeradius/3.0/clients.d/firewall.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa1.conf
including configuration file /etc/freeradius/3.0/clients.d/eufrosine.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa3.conf
including configuration file /etc/freeradius/3.0/clients.d/climene2.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa4.conf
including configuration file /etc/freeradius/3.0/clients.d/fvives.conf
including configuration file /etc/freeradius/3.0/clients.d/harmonia.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl4.conf
including configuration file /etc/freeradius/3.0/clients.d/aglaya.conf
including configuration file /etc/freeradius/3.0/clients.d/asa5500.conf
including configuration file /etc/freeradius/3.0/clients.d/talia.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-test2.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod12.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-desa.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod4.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-2.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod5.conf
including configuration file /etc/freeradius/3.0/clients.d/iuturna.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa2.conf
including configuration file /etc/freeradius/3.0/clients.d/venus.conf
including configuration file /etc/freeradius/3.0/clients.d/nona.conf
including configuration file /etc/freeradius/3.0/clients.d/esmirna.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod3.conf
including configuration file /etc/freeradius/3.0/clients.d/portalcautivo.conf
including configuration file /etc/freeradius/3.0/clients.d/climene.conf
including configuration file /etc/freeradius/3.0/clients.d/vlan_atica.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-desa2.conf
including configuration file /etc/freeradius/3.0/clients.d/decima.conf
including configuration file /etc/freeradius/3.0/clients.d/hospital_santalucia.conf
including configuration file /etc/freeradius/3.0/clients.d/oltest2.conf
including configuration file /etc/freeradius/3.0/clients.d/suma.conf
including configuration file /etc/freeradius/3.0/clients.d/pluton.conf
including configuration file /etc/freeradius/3.0/clients.d/moralesmeseguer.conf
including configuration file /etc/freeradius/3.0/clients.d/iuturna2.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod7.conf
including configuration file /etc/freeradius/3.0/clients.d/laquesisfa1.conf
including configuration file /etc/freeradius/3.0/clients.d/libra42_605.conf
including configuration file /etc/freeradius/3.0/clients.d/laquesis2.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-1.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod15.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod14.conf
including configuration file /etc/freeradius/3.0/clients.d/grado.conf
including configuration file /etc/freeradius/3.0/clients.d/iuturnafatest.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod13.conf
including configuration file /etc/freeradius/3.0/clients.d/libra41_618.conf
including configuration file /etc/freeradius/3.0/clients.d/hydra-hydra-db02.conf
including configuration file /etc/freeradius/3.0/clients.d/artemis.conf
including configuration file /etc/freeradius/3.0/clients.d/isis.conf
including configuration file /etc/freeradius/3.0/clients.d/oltest1.conf
including configuration file /etc/freeradius/3.0/clients.d/puestosoc.conf
including configuration file /etc/freeradius/3.0/clients.d/localhost.conf
including configuration file /etc/freeradius/3.0/clients.d/cassotisfatest.conf
including configuration file /etc/freeradius/3.0/clients.d/radius2-rediris.conf
including configuration file /etc/freeradius/3.0/clients.d/pbxws.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl2.conf
including configuration file /etc/freeradius/3.0/clients.d/hydra-hydra-db01.conf
including configuration file /etc/freeradius/3.0/clients.d/joaquin_lopez.conf
including configuration file /etc/freeradius/3.0/clients.d/monitorum_nyctalus3x.conf
including configuration file /etc/freeradius/3.0/clients.d/egeria.conf
including configuration file /etc/freeradius/3.0/clients.d/mikrotic_facinf.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl3.conf
including configuration file /etc/freeradius/3.0/clients.d/araneus.conf
including configuration file /etc/freeradius/3.0/clients.d/ananke.conf
including configuration file /etc/freeradius/3.0/clients.d/radius-rediris.conf
including configuration file /etc/freeradius/3.0/clients.d/monitor.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod2.conf
including configuration file /etc/freeradius/3.0/clients.d/aps.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-3.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-4.conf
including configuration file /etc/freeradius/3.0/clients.d/aglae.conf
including configuration file /etc/freeradius/3.0/clients.d/laquesisfatest.conf
including configuration file /etc/freeradius/3.0/clients.d/libra42_618.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-test1.conf
including configuration file /etc/freeradius/3.0/clients.d/decima2.conf
including configuration file /etc/freeradius/3.0/clients.d/libra41_605.conf
including configuration file /etc/freeradius/3.0/clients.d/isen.conf
including configuration file /etc/freeradius/3.0/clients.d/hospital_losarcos.conf
including configuration file /etc/freeradius/3.0/clients.d/pas.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl1.conf
including files in directory /etc/freeradius/3.0/mods-enabled/
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_inner
including configuration file /etc/freeradius/3.0/mods-enabled/pam
including configuration file /etc/freeradius/3.0/mods-enabled/linelog_syslog
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.aplicaciones_log
including configuration file /etc/freeradius/3.0/mods-enabled/realm
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_outer
including configuration file /etc/freeradius/3.0/mods-enabled/files_ecopas
including configuration file /etc/freeradius/3.0/mods-enabled/eap
including configuration file /etc/freeradius/3.0/mods-enabled/eap-eduroam-rediris
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ingenia
including configuration file /etc/freeradius/3.0/mods-enabled/always
including configuration file /etc/freeradius/3.0/mods-enabled/detail
including configuration file /etc/freeradius/3.0/mods-enabled/preprocess
including configuration file /etc/freeradius/3.0/mods-enabled/sql_pool
including configuration file /etc/freeradius/3.0/mods-config/sql/main/mysql/queries.conf
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_inner
including configuration file /etc/freeradius/3.0/mods-enabled/files_puestosoc
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_gnoss
including configuration file /etc/freeradius/3.0/mods-enabled/files_vpn
including configuration file /etc/freeradius/3.0/mods-enabled/files_aplicaciones
including configuration file /etc/freeradius/3.0/mods-enabled/sqlippool
including configuration file /etc/freeradius/3.0/mods-config/sql/ippool/mysql/queries.conf
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_rediris_log
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ext_pas
including configuration file /etc/freeradius/3.0/mods-enabled/expr
including configuration file /etc/freeradius/3.0/mods-enabled/attr_filter
including configuration file /etc/freeradius/3.0/mods-enabled/sql
including configuration file /etc/freeradius/3.0/mods-config/sql/main/mysql/queries.conf
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_izertis
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_alu
including configuration file /etc/freeradius/3.0/mods-enabled/detail.vpn_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.sql_log_um
including configuration file /etc/freeradius/3.0/mods-enabled/pap
including configuration file /etc/freeradius/3.0/mods-enabled/expiration
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_asio
including configuration file /etc/freeradius/3.0/mods-enabled/detail.adminslogin_log
including configuration file /etc/freeradius/3.0/mods-enabled/files_adminslogin
including configuration file /etc/freeradius/3.0/mods-enabled/linelog_syslog_expiration
including configuration file /etc/freeradius/3.0/mods-enabled/ldap-ecopas
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_avanttic
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_rediris_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.ecopas_log
including configuration file /etc/freeradius/3.0/mods-enabled/linelog_syslog_accounting
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_outer
including configuration file /etc/freeradius/3.0/mods-enabled/ldap-puestosoc
including configuration file /etc/freeradius/3.0/mods-enabled/files_monitorum
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn
including configuration file /etc/freeradius/3.0/mods-enabled/ldap
including configuration file /etc/freeradius/3.0/mods-enabled/detail.puestosoc_log
including configuration file /etc/freeradius/3.0/mods-enabled/mschap
including files in directory /etc/freeradius/3.0/instantiate/
including configuration file /etc/freeradius/3.0/templates.conf
including files in directory /etc/freeradius/3.0/policy.d/
including configuration file /etc/freeradius/3.0/policy.d/accounting
including configuration file /etc/freeradius/3.0/policy.d/operator-name
including configuration file /etc/freeradius/3.0/policy.d/dhcp
including configuration file /etc/freeradius/3.0/policy.d/eap
including configuration file /etc/freeradius/3.0/policy.d/rfc7542
including configuration file /etc/freeradius/3.0/policy.d/canonicalization
including configuration file /etc/freeradius/3.0/policy.d/cui
including configuration file /etc/freeradius/3.0/policy.d/control
including configuration file /etc/freeradius/3.0/policy.d/moonshot-targeted-ids
including configuration file /etc/freeradius/3.0/policy.d/abfab-tr
including configuration file /etc/freeradius/3.0/policy.d/filter
including configuration file /etc/freeradius/3.0/policy.d/debug
including files in directory /etc/freeradius/3.0/listen.d/
including configuration file /etc/freeradius/3.0/listen.d/proxy.conf
including configuration file /etc/freeradius/3.0/listen.d/acct.conf
including configuration file /etc/freeradius/3.0/listen.d/auth.conf
including files in directory /etc/freeradius/3.0/sites-enabled/
including configuration file /etc/freeradius/3.0/sites-enabled/adminslogin
including configuration file /etc/freeradius/3.0/sites-enabled/aplicaciones
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam
including configuration file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
including configuration file /etc/freeradius/3.0/sites-enabled/status
including files in directory /etc/freeradius/3.0/statusclients.d/
including configuration file /etc/freeradius/3.0/statusclients.d/monitorum_nyctalus21.conf
including configuration file /etc/freeradius/3.0/statusclients.d/admin.conf
including configuration file /etc/freeradius/3.0/statusclients.d/monitorum_nyctalus3x.conf
including configuration file /etc/freeradius/3.0/statusclients.d/nyctalus20.conf
including configuration file /etc/freeradius/3.0/sites-enabled/vpn
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam-inner-tunnel
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam-rediris
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam-rediris-inner-tunnel
including configuration file /etc/freeradius/3.0/sites-enabled/monitorum
including configuration file /etc/freeradius/3.0/sites-enabled/ecopas
including configuration file /etc/freeradius/3.0/sites-enabled/control-socket
including configuration file /etc/freeradius/3.0/sites-enabled/puestosoc
main {
security {
user = "freerad"
group = "freerad"
allow_core_dumps = no
}
name = "freeradius"
prefix = "/usr"
localstatedir = "/var"
logdir = "/var/log/freeradius"
run_dir = "/var/run/freeradius"
}
main {
name = "freeradius"
prefix = "/usr"
localstatedir = "/var"
sbindir = "/usr/sbin"
logdir = "/var/log/freeradius"
run_dir = "/var/run/freeradius"
libdir = "/usr/lib/freeradius"
radacctdir = "/var/log/freeradius/radacct"
hostname_lookups = no
max_request_time = 30
cleanup_delay = 5
max_requests = 4096
pidfile = "/var/run/freeradius/freeradius.pid"
checkrad = "/usr/sbin/checkrad"
debug_level = 0
proxy_requests = yes
log {
stripped_names = no
auth = no
auth_badpass = no
auth_goodpass = no
colourise = yes
msg_denied = "You are already logged in - access denied"
}
resources {
}
security {
max_attributes = 200
reject_delay = 1.000000
status_server = yes
}
}
radiusd: #### Loading Realms and Home Servers ####
home_server radius.rediris.es {
ipaddr = radius.rediris.es IPv4 address [130.206.1.106]
port = 1812
type = "auth+acct"
proto = "udp"
secret = <<< secret >>>
response_window = 30.000000
response_timeouts = 1
max_outstanding = 65536
zombie_period = 40
status_check = "status-server"
ping_interval = 30
check_timeout = 4
num_answers_to_alive = 3
revive_interval = 300
limit {
max_connections = 16
max_requests = 0
lifetime = 0
idle_timeout = 0
}
coa {
irt = 2
mrt = 16
mrc = 5
mrd = 30
}
}
home_server radius2.rediris.es {
ipaddr = radius2.rediris.es IPv4 address [130.206.1.107]
port = 1812
type = "auth+acct"
proto = "udp"
secret = <<< secret >>>
response_window = 30.000000
response_timeouts = 1
max_outstanding = 65536
zombie_period = 40
status_check = "status-server"
ping_interval = 30
check_timeout = 4
num_answers_to_alive = 3
revive_interval = 300
limit {
max_connections = 16
max_requests = 0
lifetime = 0
idle_timeout = 0
}
coa {
irt = 2
mrt = 16
mrc = 5
mrd = 30
}
}
home_server_pool rediris {
type = fail-over
home_server = radius.rediris.es
home_server = radius2.rediris.es
}
realm DEFAULT {
auth_pool = rediris
nostrip
}
realm NULL {
}
realm cii-murcia.es {
}
realm lcu.es {
}
realm ticarum.es {
}
realm um.es {
}
realm ~.+\.um\.es$ {
}
radiusd: #### Loading Clients ####
client sakaiprod9 {
ipaddr = 155.54.216.29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod9"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod8 {
ipaddr = 155.54.216.28
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod8"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client inanna {
ipaddr = 155.54.221.9
require_message_authenticator = no
secret = <<< secret >>>
shortname = "inanna"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pbxapp {
ipaddr = 155.54.213.197
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pbxapp"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sestertium-desa {
ipaddr = 155.54.66.44
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sestertium-desa"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod6 {
ipaddr = 155.54.216.20
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod6"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod10 {
ipaddr = 155.54.216.36
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod10"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client cloto {
ipaddr = 155.54.208.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "cloto"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod11 {
ipaddr = 155.54.216.37
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod11"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client vpn-mikrotik-ccr-1 {
ipaddr = 155.54.213.6
require_message_authenticator = no
secret = <<< secret >>>
shortname = "vpn-mikrotik-ccr-1"
virtual_server = "vpn"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client arrixaca {
ipaddr = 147.84.199.3
require_message_authenticator = no
secret = <<< secret >>>
shortname = "arrixaca"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod1 {
ipaddr = 155.54.216.11
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sestertium2 {
ipaddr = 155.54.216.70
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sestertium2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client histclinicpruebas {
ipaddr = 155.54.215.40
require_message_authenticator = no
secret = <<< secret >>>
shortname = "histclinicpruebas"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client firewall {
ipaddr = 155.54.212.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "firewall"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa1 {
ipaddr = 155.54.208.135
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client eufrosine {
ipaddr = 155.54.208.21
require_message_authenticator = no
secret = <<< secret >>>
shortname = "eufrosine"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa3 {
ipaddr = 155.54.208.137
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa3"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client climene2 {
ipaddr = 155.54.215.32
require_message_authenticator = no
secret = <<< secret >>>
shortname = "climene2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa4 {
ipaddr = 155.54.208.138
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa4"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client fvives {
ipaddr = 155.54.67.8
require_message_authenticator = no
secret = <<< secret >>>
shortname = "fvives"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client harmonia {
ipaddr = 155.54.221.14
require_message_authenticator = no
secret = <<< secret >>>
shortname = "harmonia"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl4 {
ipaddr = 155.54.216.224
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl4"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client aglaya {
ipaddr = 155.54.221.13
require_message_authenticator = no
secret = <<< secret >>>
shortname = "aglaya"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client asa5500 {
ipaddr = 155.54.213.5
require_message_authenticator = no
secret = <<< secret >>>
shortname = "asa5500"
virtual_server = "vpn"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client talia {
ipaddr = 155.54.215.30
require_message_authenticator = no
secret = <<< secret >>>
shortname = "talia"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-test2 {
ipaddr = 155.54.215.42
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-test2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod12 {
ipaddr = 155.54.216.38
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod12"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-desa {
ipaddr = 155.54.215.28
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-desa"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod4 {
ipaddr = 155.54.216.14
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod4"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-2 {
ipaddr = 155.54.1.22
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-2"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod5 {
ipaddr = 155.54.216.15
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod5"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client iuturna {
ipaddr = 155.54.216.100
require_message_authenticator = no
secret = <<< secret >>>
shortname = "iuturna"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa2 {
ipaddr = 155.54.208.136
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client venus {
ipaddr = 155.54.208.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "venus"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client nona {
ipaddr = 155.54.216.99
require_message_authenticator = no
secret = <<< secret >>>
shortname = "nona"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client esmirna {
ipaddr = 155.54.215.26
require_message_authenticator = no
secret = <<< secret >>>
shortname = "esmirna"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod3 {
ipaddr = 155.54.216.13
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod3"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client portalcautivo {
ipaddr = 155.54.213.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "portalcautivo"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client climene {
ipaddr = 155.54.215.31
require_message_authenticator = no
secret = <<< secret >>>
shortname = "climene"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client vlan_atica {
ipaddr = 155.54.66.0/23
require_message_authenticator = no
secret = <<< secret >>>
shortname = "vlan_atica"
virtual_server = "ecopas"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-desa2 {
ipaddr = 155.54.215.29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-desa2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client decima {
ipaddr = 155.54.216.127
require_message_authenticator = no
secret = <<< secret >>>
shortname = "decima"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hospital_santalucia {
ipaddr = 147.84.199.6
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hospital_santalucia"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client oltest2 {
ipaddr = 155.54.215.20
require_message_authenticator = no
secret = <<< secret >>>
shortname = "oltest2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client suma {
ipaddr = 155.54.216.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "suma"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pluton {
ipaddr = 155.54.66.182
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pluton"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client moralesmeseguer {
ipaddr = 147.84.199.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "moralesmeseguer"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client iuturna2 {
ipaddr = 155.54.216.200
require_message_authenticator = no
secret = <<< secret >>>
shortname = "iuturna2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod7 {
ipaddr = 155.54.216.23
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod7"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client laquesisfa1 {
ipaddr = 155.54.216.144
require_message_authenticator = no
secret = <<< secret >>>
shortname = "laquesisfa1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra42_605 {
ipaddr = 155.54.212.221
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra42_605"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client laquesis2 {
ipaddr = 155.54.216.117
require_message_authenticator = no
secret = <<< secret >>>
shortname = "laquesis2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-1 {
ipaddr = 155.54.1.21
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-1"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod15 {
ipaddr = 155.54.216.35
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod15"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod14 {
ipaddr = 155.54.216.33
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod14"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client grado {
ipaddr = 155.54.208.2
require_message_authenticator = no
secret = <<< secret >>>
shortname = "grado"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client iuturnafatest {
ipaddr = 155.54.215.17
require_message_authenticator = no
secret = <<< secret >>>
shortname = "iuturnafatest"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod13 {
ipaddr = 155.54.216.32
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod13"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra41_618 {
ipaddr = 155.54.218.60
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra41_618"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hydra-hydra-db02 {
ipaddr = 155.54.208.102
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hydra-hydra-db02"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client artemis {
ipaddr = 155.54.208.15
require_message_authenticator = no
secret = <<< secret >>>
shortname = "artemis"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client isis {
ipaddr = 155.54.221.12
require_message_authenticator = no
secret = <<< secret >>>
shortname = "isis"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client oltest1 {
ipaddr = 155.54.215.19
require_message_authenticator = no
secret = <<< secret >>>
shortname = "oltest1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client puestosoc {
ipaddr = 155.54.144.0/22
require_message_authenticator = no
secret = <<< secret >>>
shortname = "puestosoc"
virtual_server = "puestosoc"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client localhost {
ipaddr = 127.0.0.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "vulpes40"
virtual_server = "vpn"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client cassotisfatest {
ipaddr = 155.54.215.18
require_message_authenticator = no
secret = <<< secret >>>
shortname = "cassotisfatest"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client radius2-rediris {
ipaddr = 130.206.1.107
require_message_authenticator = no
secret = <<< secret >>>
shortname = "radius2-rediris"
virtual_server = "eduroam-rediris"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pbxws {
ipaddr = 155.54.213.215
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pbxws"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl2 {
ipaddr = 155.54.216.221
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hydra-hydra-db01 {
ipaddr = 155.54.208.100
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hydra-hydra-db01"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client joaquin_lopez {
ipaddr = 155.54.66.68
require_message_authenticator = no
secret = <<< secret >>>
shortname = "joaquin_lopez"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client monitorum_nyctalus3x {
ipaddr = 155.54.212.48/29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitorum_nyctalus3x"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client egeria {
ipaddr = 155.54.215.27
require_message_authenticator = no
secret = <<< secret >>>
shortname = "egeria"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client mikrotic_facinf {
ipaddr = 155.54.204.113
require_message_authenticator = no
secret = <<< secret >>>
shortname = "mikrotic_facinf"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl3 {
ipaddr = 155.54.216.223
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl3"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client araneus {
ipaddr = 155.54.212.224/27
require_message_authenticator = no
secret = <<< secret >>>
shortname = "araneus"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client ananke {
ipaddr = 155.54.221.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "ananke"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client radius-rediris {
ipaddr = 130.206.1.106
require_message_authenticator = no
secret = <<< secret >>>
shortname = "radius-rediris"
virtual_server = "eduroam-rediris"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client monitor {
ipaddr = 155.54.67.15
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitor"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod2 {
ipaddr = 155.54.216.12
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client aps {
ipaddr = 10.57.0.0/16
require_message_authenticator = no
secret = <<< secret >>>
shortname = "aps"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-3 {
ipaddr = 155.54.1.31
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-3"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-4 {
ipaddr = 155.54.1.32
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-4"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client aglae {
ipaddr = 155.54.221.11
require_message_authenticator = no
secret = <<< secret >>>
shortname = "aglae"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client laquesisfatest {
ipaddr = 155.54.215.16
require_message_authenticator = no
secret = <<< secret >>>
shortname = "laquesisfatest"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra42_618 {
ipaddr = 155.54.218.61
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra42_618"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-test1 {
ipaddr = 155.54.215.41
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-test1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client decima2 {
ipaddr = 155.54.216.67
require_message_authenticator = no
secret = <<< secret >>>
shortname = "decima2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra41_605 {
ipaddr = 155.54.212.220
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra41_605"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client isen {
ipaddr = 62.43.188.13
require_message_authenticator = no
secret = <<< secret >>>
shortname = "isen"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hospital_losarcos {
ipaddr = 147.84.199.5
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hospital_losarcos"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pas {
ipaddr = 155.54.16.0/21
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pas"
virtual_server = "ecopas"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl1 {
ipaddr = 155.54.216.220
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
Debugger not attached
# Creating Auth-Type = pam
# Creating Auth-Type = PAP
# Creating Auth-Type = eap
# Creating Autz-Type = Status-Server
# Creating Auth-Type = MS-CHAP
# Creating Auth-Type = eap-eduroam-rediris
radiusd: #### Instantiating modules ####
modules {
# Loaded module rlm_files
# Loading module "files_eduroam_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_inner
files files_eduroam_inner {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_inner/authorize"
}
# Loaded module rlm_pam
# Loading module "pam" from file /etc/freeradius/3.0/mods-enabled/pam
pam {
pam_auth = "radiusd"
}
# Loaded module rlm_linelog
# Loading module "syslog" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog
linelog syslog {
filename = "syslog"
escape_filenames = no
syslog_severity = "info"
permissions = 384
format = "This is a log message for %{User-Name}"
reference = "messages.%{%{%{reply:Packet-Type}:-%{Packet-Type}}:-default}"
}
# Loaded module rlm_detail
# Loading module "eduroam_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_log
detail eduroam_log {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "aplicaciones_log" from file /etc/freeradius/3.0/mods-enabled/detail.aplicaciones_log
detail aplicaciones_log {
filename = "/var/log/freeradius/radacct/%{%{client:Client-Id}:-%{%{Calling-Station-Id}:-%{Client-IP-Address}}}/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_realm
# Loading module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm
realm IPASS {
format = "prefix"
delimiter = "/"
ignore_default = no
ignore_null = no
}
# Loading module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm
realm suffix {
format = "suffix"
delimiter = "@"
ignore_default = no
ignore_null = no
}
# Loading module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm
realm bangpath {
format = "prefix"
delimiter = "!"
ignore_default = no
ignore_null = no
}
# Loading module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm
realm realmpercent {
format = "suffix"
delimiter = "%"
ignore_default = no
ignore_null = no
}
# Loading module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm
realm ntdomain {
format = "prefix"
delimiter = "\\"
ignore_default = no
ignore_null = no
}
# Loading module "files_eduroam_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_outer
files files_eduroam_outer {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_outer/authorize"
}
# Loading module "files_ecopas" from file /etc/freeradius/3.0/mods-enabled/files_ecopas
files files_ecopas {
filename = "/etc/freeradius/3.0/mods-config/files_ecopas/authorize"
}
# Loaded module rlm_eap
# Loading module "eap" from file /etc/freeradius/3.0/mods-enabled/eap
eap {
default_eap_type = "peap"
timer_expire = 60
ignore_unknown_eap_types = yes
cisco_accounting_username_bug = yes
max_sessions = 4096
}
# Loading module "eap-eduroam-rediris" from file /etc/freeradius/3.0/mods-enabled/eap-eduroam-rediris
eap eap-eduroam-rediris {
default_eap_type = "peap"
timer_expire = 60
ignore_unknown_eap_types = yes
cisco_accounting_username_bug = yes
max_sessions = 4096
}
# Loaded module rlm_ippool
# Loading module "pool_vpn_ingenia" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ingenia
ippool pool_vpn_ingenia {
filename = "/etc/freeradius/3.0/db.pool_vpn_ingenia.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_ingenia.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.40
range_stop = 155.54.194.41
netmask = 255.255.255.255
cache_size = 2
override = no
maximum_timeout = 0
}
# Loaded module rlm_always
# Loading module "reject" from file /etc/freeradius/3.0/mods-enabled/always
always reject {
rcode = "reject"
simulcount = 0
mpp = no
}
# Loading module "fail" from file /etc/freeradius/3.0/mods-enabled/always
always fail {
rcode = "fail"
simulcount = 0
mpp = no
}
# Loading module "ok" from file /etc/freeradius/3.0/mods-enabled/always
always ok {
rcode = "ok"
simulcount = 0
mpp = no
}
# Loading module "handled" from file /etc/freeradius/3.0/mods-enabled/always
always handled {
rcode = "handled"
simulcount = 0
mpp = no
}
# Loading module "invalid" from file /etc/freeradius/3.0/mods-enabled/always
always invalid {
rcode = "invalid"
simulcount = 0
mpp = no
}
# Loading module "userlock" from file /etc/freeradius/3.0/mods-enabled/always
always userlock {
rcode = "userlock"
simulcount = 0
mpp = no
}
# Loading module "notfound" from file /etc/freeradius/3.0/mods-enabled/always
always notfound {
rcode = "notfound"
simulcount = 0
mpp = no
}
# Loading module "noop" from file /etc/freeradius/3.0/mods-enabled/always
always noop {
rcode = "noop"
simulcount = 0
mpp = no
}
# Loading module "updated" from file /etc/freeradius/3.0/mods-enabled/always
always updated {
rcode = "updated"
simulcount = 0
mpp = no
}
# Loading module "detail" from file /etc/freeradius/3.0/mods-enabled/detail
detail {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_preprocess
# Loading module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess
preprocess {
huntgroups = "/etc/freeradius/3.0/mods-config/preprocess/huntgroups"
hints = "/etc/freeradius/3.0/mods-config/preprocess/hints"
with_ascend_hack = no
ascend_channels_per_line = 23
with_ntdomain_hack = no
with_specialix_jetstream_hack = no
with_cisco_vsa_hack = no
with_alvarion_vsa_hack = no
}
# Loaded module rlm_sql
# Loading module "sql_pool" from file /etc/freeradius/3.0/mods-enabled/sql_pool
sql sql_pool {
driver = "rlm_sql_mysql"
server = "kogia50.um.es"
port = 3306
login = "usradiuslogop"
password = <<< secret >>>
radius_db = "dbradius"
read_groups = yes
read_profiles = yes
read_clients = no
delete_stale_sessions = yes
sql_user_name = "%{User-Name}"
default_user_profile = ""
client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"
authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{sql_pool-sql-Group}' ORDER BY id"
authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{sql_pool-sql-Group}' ORDER BY id"
group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority"
simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"
auto_escape = no
accounting {
reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}"
type {
accounting-on {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
accounting-off {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
start {
query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')"
}
interim-update {
query = "UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
stop {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
}
}
post-auth {
reference = ".query"
query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')"
}
}
rlm_sql (sql_pool): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
Creating attribute sql_pool-SQL-Group
# Loading module "files_eduroam_rediris_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_inner
files files_eduroam_rediris_inner {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_rediris_inner/authorize"
}
# Loading module "files_puestosoc" from file /etc/freeradius/3.0/mods-enabled/files_puestosoc
files files_puestosoc {
filename = "/etc/freeradius/3.0/mods-config/files_puestosoc/authorize"
}
# Loading module "pool_vpn_gnoss" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_gnoss
ippool pool_vpn_gnoss {
filename = "/etc/freeradius/3.0/db.pool_vpn_gnoss.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_gnoss.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.16
range_stop = 155.54.194.18
netmask = 255.255.255.255
cache_size = 3
override = no
maximum_timeout = 0
}
# Loading module "files_vpn" from file /etc/freeradius/3.0/mods-enabled/files_vpn
files files_vpn {
filename = "/etc/freeradius/3.0/mods-config/files_vpn/authorize"
}
# Loading module "files_aplicaciones" from file /etc/freeradius/3.0/mods-enabled/files_aplicaciones
files files_aplicaciones {
filename = "/etc/freeradius/3.0/mods-config/files_aplicaciones/authorize"
}
# Loaded module rlm_sqlippool
# Loading module "sqlippool" from file /etc/freeradius/3.0/mods-enabled/sqlippool
sqlippool {
sql_module_instance = "sql_pool"
lease_duration = 3600
pool_name = "Pool-Name"
default_pool = "main_pool"
attribute_name = "Framed-IP-Address"
allocate_begin = "START TRANSACTION"
allocate_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'allocate_clear', expiry_time = NULL WHERE expiry_time <= NOW() - INTERVAL 1 SECOND AND nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'"
allocate_clear_timeout = 1
allocate_find = "SELECT framedipaddress FROM radippool WHERE pool_name = '%{control:Pool-Name}' AND (expiry_time < NOW() OR expiry_time IS NULL) ORDER BY (username <> '%{User-Name}'), (callingstationid <> '%{Calling-Station-Id}'), expiry_time LIMIT 1 FOR UPDATE"
allocate_update = "UPDATE radippool SET nasipaddress = '%{NAS-IP-Address}', pool_key = '%{NAS-Port}', callingstationid = '%{Calling-Station-Id}', reason = 'allocate_update', username = '%{User-Name}', expiry_time = NOW() + INTERVAL 3600 SECOND WHERE framedipaddress = '%I'"
allocate_commit = "COMMIT"
pool_check = "SELECT id FROM radippool WHERE pool_name='%{control:Pool-Name}' LIMIT 1"
start_begin = "START TRANSACTION"
start_update = "UPDATE radippool SET reason = 'start_update', expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{NAS-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'"
start_commit = "COMMIT"
alive_begin = "START TRANSACTION"
alive_update = "UPDATE radippool SET reason = 'alive_update', expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'"
alive_commit = "COMMIT"
stop_begin = "START TRANSACTION"
stop_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'stop_clear', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'"
stop_commit = "COMMIT"
on_begin = "START TRANSACTION"
on_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'on_clear', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'"
on_commit = "COMMIT"
off_begin = "START TRANSACTION"
off_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'off_clear', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'"
off_commit = "COMMIT"
messages {
exists = "Existing IP: %{reply:Framed-IP-Address} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
success = "Allocated IP: %{reply:Framed-IP-Address} from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
clear = "Released IP Framed-IP-Address (did %{Called-Station-Id} cli %{Calling-Station-Id} user %{User-Name})"
failed = "IP Allocation FAILED from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
nopool = "No Pool-Name defined (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
}
}
# Loading module "eduroam_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_rediris_log
detail eduroam_rediris_log {
filename = "/var/log/freeradius/radacct/eduroam-rediris/eduroam_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "pool_vpn_ext_pas" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ext_pas
ippool pool_vpn_ext_pas {
filename = "/etc/freeradius/3.0/db.pool_vpn_ext_pas.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_ext_pas.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.32
range_stop = 155.54.194.35
netmask = 255.255.255.255
cache_size = 4
override = yes
maximum_timeout = 0
}
# Loaded module rlm_expr
# Loading module "expr" from file /etc/freeradius/3.0/mods-enabled/expr
expr {
safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ"
}
# Loaded module rlm_attr_filter
# Loading module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.post-proxy {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy"
key = "%{Realm}"
relaxed = no
}
# Loading module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.pre-proxy {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/pre-proxy"
key = "%{Realm}"
relaxed = no
}
# Loading module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.access_reject {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_reject"
key = "%{User-Name}"
relaxed = no
}
# Loading module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.access_challenge {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_challenge"
key = "%{User-Name}"
relaxed = no
}
# Loading module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.accounting_response {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/accounting_response"
key = "%{User-Name}"
relaxed = no
}
# Loading module "attr_filter.post-proxy-tlm" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.post-proxy-tlm {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy-tlm"
key = "%{Realm}"
relaxed = no
}
# Loading module "sql" from file /etc/freeradius/3.0/mods-enabled/sql
sql sql {
driver = "rlm_sql_mysql"
server = "kogia50.um.es"
port = 3306
login = "usradiuslogop"
password = <<< secret >>>
radius_db = "dbradiuslog"
read_groups = yes
read_profiles = yes
read_clients = no
delete_stale_sessions = yes
sql_user_name = "%{User-Name}"
default_user_profile = ""
client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"
authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{sql-sql-Group}' ORDER BY id"
authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{sql-sql-Group}' ORDER BY id"
group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority"
simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"
auto_escape = no
accounting {
reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}"
type {
accounting-on {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
accounting-off {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
start {
query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')"
}
interim-update {
query = "UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
stop {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
}
}
post-auth {
reference = ".query"
query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')"
}
}
rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
Creating attribute sql-SQL-Group
# Loading module "pool_vpn_izertis" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_izertis
ippool pool_vpn_izertis {
filename = "/etc/freeradius/3.0/db.pool_vpn_izertis.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_izertis.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.24
range_stop = 155.54.194.27
netmask = 255.255.255.255
cache_size = 4
override = no
maximum_timeout = 0
}
# Loading module "pool_vpn_alu" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_alu
ippool pool_vpn_alu {
filename = "/etc/freeradius/3.0/db.pool_vpn_alu.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_alu.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id}"
range_start = 155.54.197.1
range_stop = 155.54.197.254
netmask = 255.255.255.255
cache_size = 254
override = no
maximum_timeout = 0
}
# Loading module "vpn_log" from file /etc/freeradius/3.0/mods-enabled/detail.vpn_log
detail vpn_log {
filename = "/var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "sql_log_um" from file /etc/freeradius/3.0/mods-enabled/detail.sql_log_um
detail sql_log_um {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_sql"
header = "%t"
permissions = 384
locking = false
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_pap
# Loading module "pap" from file /etc/freeradius/3.0/mods-enabled/pap
pap {
normalise = yes
}
# Loaded module rlm_expiration
# Loading module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration
# Loading module "pool_vpn_asio" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_asio
ippool pool_vpn_asio {
filename = "/etc/freeradius/3.0/db.pool_vpn_asio"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_asio.index"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.11
range_stop = 155.54.194.12
netmask = 255.255.255.255
cache_size = 2
override = no
maximum_timeout = 0
}
# Loading module "adminslogin_log" from file /etc/freeradius/3.0/mods-enabled/detail.adminslogin_log
detail adminslogin_log {
filename = "/var/log/freeradius/radacct/adminslogin/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "files_adminslogin" from file /etc/freeradius/3.0/mods-enabled/files_adminslogin
files files_adminslogin {
filename = "/etc/freeradius/3.0/mods-config/files_adminslogin/authorize"
}
# Loading module "syslog_expiration" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_expiration
linelog syslog_expiration {
filename = "syslog"
escape_filenames = no
syslog_severity = "info"
permissions = 384
format = "This is a log message for %{User-Name}"
reference = "messages.Expiration"
}
# Loaded module rlm_ldap
# Loading module "ldap-ecopas" from file /etc/freeradius/3.0/mods-enabled/ldap-ecopas
ldap ldap-ecopas {
server = "ldapacc.um.es"
port = 389
identity = "cn=radius,ou=People,ou=Management,o=SlapdRoot"
password = <<< secret >>>
sasl {
}
user {
scope = "sub"
access_positive = yes
sasl {
}
}
group {
filter = ""
scope = "sub"
name_attribute = "gidNumber"
membership_attribute = "uid"
membership_filter = "(|(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectClass=posixAccount))(&(objectClass=posixGroup)(memberUid=%{%{Stripped-User-Name}:-%{User-Name}})))"
cacheable_name = no
cacheable_dn = no
allow_dangling_group_ref = no
}
client {
filter = "(objectClass=radiusClient)"
scope = "sub"
base_dn = "ou=Usuarios,dc=Telematica"
}
profile {
}
options {
ldap_debug = 40
chase_referrals = yes
rebind = yes
net_timeout = 10
res_timeout = 5
srv_timelimit = 10
idle = 60
probes = 3
interval = 3
}
tls {
start_tls = no
require_cert = "allow"
}
}
Creating attribute ldap-ecopas-LDAP-Group
# Loading module "pool_vpn_avanttic" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_avanttic
ippool pool_vpn_avanttic {
filename = "/etc/freeradius/3.0/db.pool_vpn_avanttic.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_avanttic.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.1
range_stop = 155.54.194.7
netmask = 255.255.255.255
cache_size = 7
override = no
maximum_timeout = 0
}
# Loading module "eduroam_inner_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_rediris_log
detail eduroam_inner_rediris_log {
filename = "/var/log/freeradius/radacct/eduroam-rediris/eduroam_inner_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail auth_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail reply_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail pre_proxy_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail post_proxy_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "eduroam_inner_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_log
detail eduroam_inner_log {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_inner_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "ecopas_log" from file /etc/freeradius/3.0/mods-enabled/detail.ecopas_log
detail ecopas_log {
filename = "/var/log/freeradius/radacct/ecopas/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "syslog_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_accounting
linelog syslog_accounting {
filename = "syslog"
escape_filenames = no
syslog_severity = "info"
permissions = 384
format = "This is a log message for %{User-Name}"
reference = "messages.%{%{Acct-Status-Type}:-unknown}"
}
# Loading module "files_eduroam_rediris_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_outer
files files_eduroam_rediris_outer {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_rediris_outer/authorize"
}
# Loading module "ldap-puestosoc" from file /etc/freeradius/3.0/mods-enabled/ldap-puestosoc
ldap ldap-puestosoc {
server = "ldapacc.um.es"
port = 389
identity = "cn=radius,ou=People,ou=Management,o=SlapdRoot"
password = <<< secret >>>
sasl {
}
user {
scope = "sub"
access_positive = yes
sasl {
}
}
group {
filter = ""
scope = "sub"
name_attribute = "gidNumber"
membership_attribute = "uid"
membership_filter = "(|(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectClass=posixAccount))(&(objectClass=posixGroup)(memberUid=%{%{Stripped-User-Name}:-%{User-Name}})))"
cacheable_name = no
cacheable_dn = no
allow_dangling_group_ref = no
}
client {
filter = "(objectClass=radiusClient)"
scope = "sub"
base_dn = "ou=Usuarios,dc=Telematica"
}
profile {
}
options {
ldap_debug = 40
chase_referrals = yes
rebind = yes
net_timeout = 10
res_timeout = 5
srv_timelimit = 10
idle = 60
probes = 3
interval = 3
}
tls {
start_tls = no
require_cert = "allow"
}
}
Creating attribute ldap-puestosoc-LDAP-Group
# Loading module "files_monitorum" from file /etc/freeradius/3.0/mods-enabled/files_monitorum
files files_monitorum {
filename = "/etc/freeradius/3.0/mods-config/files_monitorum/authorize"
}
# Loading module "pool_vpn" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn
ippool pool_vpn {
filename = "/etc/freeradius/3.0/db.pool_vpn.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id}"
range_start = 155.54.194.48
range_stop = 155.54.194.239
netmask = 255.255.255.255
cache_size = 192
override = no
maximum_timeout = 0
}
# Loading module "ldap" from file /etc/freeradius/3.0/mods-enabled/ldap
ldap ldap {
server = "ldapacc.um.es"
port = 389
identity = "cn=radius,ou=People,ou=Management,o=SlapdRoot"
password = <<< secret >>>
sasl {
}
user {
scope = "sub"
access_positive = yes
sasl {
}
}
group {
filter = ""
scope = "sub"
name_attribute = "gidNumber"
membership_attribute = "uid"
membership_filter = "(&(mail=%{User-Name})(objectClass=posixAccount))"
cacheable_name = no
cacheable_dn = no
allow_dangling_group_ref = no
}
client {
filter = "(objectClass=radiusClient)"
scope = "sub"
base_dn = "ou=Usuarios,dc=Telematica"
}
profile {
}
options {
ldap_debug = 40
chase_referrals = yes
rebind = yes
net_timeout = 10
res_timeout = 5
srv_timelimit = 10
idle = 60
probes = 3
interval = 3
}
tls {
start_tls = no
require_cert = "allow"
}
}
Creating attribute ldap-LDAP-Group
# Loading module "puestosoc_log" from file /etc/freeradius/3.0/mods-enabled/detail.puestosoc_log
detail puestosoc_log {
filename = "/var/log/freeradius/radacct/puestosoc/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_mschap
# Loading module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap
mschap {
use_mppe = yes
require_encryption = no
require_strong = no
with_ntdomain_hack = yes
passchange {
}
allow_retry = yes
winbind_retry_with_normalised_username = no
}
instantiate {
}
# Instantiating module "files_eduroam_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_inner
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_inner/authorize
# Instantiating module "syslog" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog
# Instantiating module "eduroam_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_log
rlm_detail (eduroam_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "aplicaciones_log" from file /etc/freeradius/3.0/mods-enabled/detail.aplicaciones_log
rlm_detail (aplicaciones_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "files_eduroam_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_outer
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_outer/authorize
# Instantiating module "files_ecopas" from file /etc/freeradius/3.0/mods-enabled/files_ecopas
reading pairlist file /etc/freeradius/3.0/mods-config/files_ecopas/authorize
# Instantiating module "eap" from file /etc/freeradius/3.0/mods-enabled/eap
# Linked to sub-module rlm_eap_md5
# Linked to sub-module rlm_eap_leap
# Linked to sub-module rlm_eap_gtc
gtc {
challenge = "Password: "
auth_type = "PAP"
}
# Linked to sub-module rlm_eap_tls
tls {
tls = "tls-common"
}
tls-config tls-common {
verify_depth = 0
ca_path = "/etc/freeradius/3.0/certs"
pem_file_type = yes
private_key_file = "/etc/freeradius/3.0/certs/priv-radius.um.es.pem"
certificate_file = "/etc/freeradius/3.0/certs/cert-radius.um.es.pem"
ca_file = "/etc/freeradius/3.0/certs/ca-umu-certificado.pem"
dh_file = "/etc/freeradius/3.0/certs/dh"
fragment_size = 1024
include_length = yes
auto_chain = yes
check_crl = no
check_all_crl = no
cipher_list = "DEFAULT"
ecdh_curve = "prime256v1"
tls_max_version = ""
tls_min_version = "1.0"
cache {
enable = no
lifetime = 24
max_entries = 255
}
verify {
skip_if_ocsp_ok = no
}
ocsp {
enable = no
override_cert_url = yes
url = "http://127.0.0.1/ocsp/"
use_nonce = yes
timeout = 0
softfail = no
}
}
The configuration allows TLS 1.0 and/or TLS 1.1. We STRONGLY recommned using only TLS 1.2 for security
Please set: tls_min_version = "1.2"
# Linked to sub-module rlm_eap_ttls
ttls {
tls = "tls-common"
default_eap_type = "gtc"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
virtual_server = "eduroam-inner-tunnel"
include_length = yes
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_peap
peap {
tls = "tls-common"
default_eap_type = "mschapv2"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
proxy_tunneled_request_as_eap = yes
virtual_server = "eduroam-inner-tunnel"
soh = no
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_mschapv2
mschapv2 {
with_ntdomain_hack = no
send_error = no
}
# Instantiating module "eap-eduroam-rediris" from file /etc/freeradius/3.0/mods-enabled/eap-eduroam-rediris
# Linked to sub-module rlm_eap_md5
# Linked to sub-module rlm_eap_leap
# Linked to sub-module rlm_eap_gtc
gtc {
challenge = "Password: "
auth_type = "PAP"
}
# Linked to sub-module rlm_eap_tls
tls {
tls = "tls-common"
}
tls-config tls-common {
verify_depth = 0
ca_path = "/etc/freeradius/3.0/certs"
pem_file_type = yes
private_key_file = "/etc/freeradius/3.0/certs/priv-radius.um.es.pem"
certificate_file = "/etc/freeradius/3.0/certs/cert-radius.um.es.pem"
ca_file = "/etc/freeradius/3.0/certs/ca-umu-certificado.pem"
dh_file = "/etc/freeradius/3.0/certs/dh"
fragment_size = 1024
include_length = yes
auto_chain = yes
check_crl = no
check_all_crl = no
cipher_list = "DEFAULT"
ecdh_curve = "prime256v1"
tls_max_version = ""
tls_min_version = "1.0"
cache {
enable = no
lifetime = 24
max_entries = 255
}
verify {
skip_if_ocsp_ok = no
}
ocsp {
enable = no
override_cert_url = yes
url = "http://127.0.0.1/ocsp/"
use_nonce = yes
timeout = 0
softfail = no
}
}
The configuration allows TLS 1.0 and/or TLS 1.1. We STRONGLY recommned using only TLS 1.2 for security
Please set: tls_min_version = "1.2"
# Linked to sub-module rlm_eap_ttls
ttls {
tls = "tls-common"
default_eap_type = "gtc"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
virtual_server = "eduroam-rediris-inner-tunnel"
include_length = yes
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_peap
peap {
tls = "tls-common"
default_eap_type = "mschapv2"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
proxy_tunneled_request_as_eap = yes
virtual_server = "eduroam-rediris-inner-tunnel"
soh = no
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_mschapv2
mschapv2 {
with_ntdomain_hack = no
send_error = no
}
# Instantiating module "pool_vpn_ingenia" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ingenia
# Instantiating module "reject" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "fail" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "ok" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "handled" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "invalid" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "userlock" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "notfound" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "noop" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "updated" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "detail" from file /etc/freeradius/3.0/mods-enabled/detail
# Instantiating module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess
reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/huntgroups
reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/hints
# Instantiating module "sql_pool" from file /etc/freeradius/3.0/mods-enabled/sql_pool
rlm_sql_mysql: libmysql version: 5.7.32
mysql {
tls {
tls_required = no
check_cert = no
check_cert_cn = no
}
warnings = "auto"
}
rlm_sql (sql_pool): Attempting to connect to database "dbradius"
rlm_sql (sql_pool): Initialising connection pool
pool {
start = 1
min = 1
max = 4096
spare = 1
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 60
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_sql (sql_pool): Opening additional connection (0), 1 of 1024 pending slots used
rlm_sql_mysql: Starting connect to MySQL server
rlm_sql_mysql: Connected to database 'dbradius' on kogia50.um.es via TCP/IP, server version 5.7.32-0ubuntu0.16.04.1-log, protocol version 10
# Instantiating module "files_eduroam_rediris_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_inner
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_rediris_inner/authorize
# Instantiating module "files_puestosoc" from file /etc/freeradius/3.0/mods-enabled/files_puestosoc
reading pairlist file /etc/freeradius/3.0/mods-config/files_puestosoc/authorize
# Instantiating module "pool_vpn_gnoss" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_gnoss
# Instantiating module "files_vpn" from file /etc/freeradius/3.0/mods-enabled/files_vpn
reading pairlist file /etc/freeradius/3.0/mods-config/files_vpn/authorize
# Instantiating module "files_aplicaciones" from file /etc/freeradius/3.0/mods-enabled/files_aplicaciones
reading pairlist file /etc/freeradius/3.0/mods-config/files_aplicaciones/authorize
# Instantiating module "sqlippool" from file /etc/freeradius/3.0/mods-enabled/sqlippool
Ignoring "allocate_clear_timeout = 1", forcing to "allocate_clear_timeout = 1"
# Instantiating module "eduroam_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_rediris_log
rlm_detail (eduroam_rediris_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "pool_vpn_ext_pas" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ext_pas
# Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy
# Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/pre-proxy
# Instantiating module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_reject
# Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_challenge
# Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/accounting_response
# Instantiating module "attr_filter.post-proxy-tlm" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy-tlm
# Instantiating module "sql" from file /etc/freeradius/3.0/mods-enabled/sql
mysql {
tls {
tls_required = no
check_cert = no
check_cert_cn = no
}
warnings = "auto"
}
rlm_sql (sql): Attempting to connect to database "dbradiuslog"
rlm_sql (sql): Initialising connection pool
pool {
start = 1
min = 1
max = 4096
spare = 1
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 60
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_sql (sql): Opening additional connection (0), 1 of 1024 pending slots used
rlm_sql_mysql: Starting connect to MySQL server
rlm_sql_mysql: Connected to database 'dbradiuslog' on kogia50.um.es via TCP/IP, server version 5.7.32-0ubuntu0.16.04.1-log, protocol version 10
# Instantiating module "pool_vpn_izertis" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_izertis
# Instantiating module "pool_vpn_alu" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_alu
# Instantiating module "vpn_log" from file /etc/freeradius/3.0/mods-enabled/detail.vpn_log
rlm_detail (vpn_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "sql_log_um" from file /etc/freeradius/3.0/mods-enabled/detail.sql_log_um
rlm_detail (sql_log_um): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "pap" from file /etc/freeradius/3.0/mods-enabled/pap
# Instantiating module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration
# Instantiating module "pool_vpn_asio" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_asio
# Instantiating module "adminslogin_log" from file /etc/freeradius/3.0/mods-enabled/detail.adminslogin_log
rlm_detail (adminslogin_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "files_adminslogin" from file /etc/freeradius/3.0/mods-enabled/files_adminslogin
reading pairlist file /etc/freeradius/3.0/mods-config/files_adminslogin/authorize
# Instantiating module "syslog_expiration" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_expiration
# Instantiating module "ldap-ecopas" from file /etc/freeradius/3.0/mods-enabled/ldap-ecopas
rlm_ldap: libldap older than the version the server was built against
rlm_ldap: linked: 20445, built: 20447
rlm_ldap: libldap vendor: OpenLDAP, version: 20445
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap-ecopas): Initialising connection pool
pool {
start = 5
min = 3
max = 4096
spare = 10
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 30
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_ldap (ldap-ecopas): Opening additional connection (0), 1 of 1024 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (1), 1 of 1023 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (2), 1 of 1022 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (3), 1 of 1021 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (4), 1 of 1020 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
# Instantiating module "pool_vpn_avanttic" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_avanttic
# Instantiating module "eduroam_inner_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_rediris_log
rlm_detail (eduroam_inner_rediris_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
# Instantiating module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
# Instantiating module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
# Instantiating module "eduroam_inner_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_log
rlm_detail (eduroam_inner_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "ecopas_log" from file /etc/freeradius/3.0/mods-enabled/detail.ecopas_log
rlm_detail (ecopas_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "syslog_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_accounting
# Instantiating module "files_eduroam_rediris_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_outer
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_rediris_outer/authorize
# Instantiating module "ldap-puestosoc" from file /etc/freeradius/3.0/mods-enabled/ldap-puestosoc
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap-puestosoc): Initialising connection pool
pool {
start = 5
min = 3
max = 4096
spare = 10
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 30
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_ldap (ldap-puestosoc): Opening additional connection (0), 1 of 1024 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (1), 1 of 1023 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (2), 1 of 1022 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (3), 1 of 1021 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (4), 1 of 1020 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
# Instantiating module "files_monitorum" from file /etc/freeradius/3.0/mods-enabled/files_monitorum
reading pairlist file /etc/freeradius/3.0/mods-config/files_monitorum/authorize
# Instantiating module "pool_vpn" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn
# Instantiating module "ldap" from file /etc/freeradius/3.0/mods-enabled/ldap
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap): Initialising connection pool
pool {
start = 5
min = 3
max = 4096
spare = 10
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 30
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_ldap (ldap): Opening additional connection (0), 1 of 1024 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (1), 1 of 1023 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (2), 1 of 1022 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (3), 1 of 1021 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (4), 1 of 1020 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
# Instantiating module "puestosoc_log" from file /etc/freeradius/3.0/mods-enabled/detail.puestosoc_log
rlm_detail (puestosoc_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap
rlm_mschap (mschap): using internal authentication
} # modules
radiusd: #### Loading Virtual Servers ####
server { # from file /etc/freeradius/3.0/radiusd.conf
} # server
server adminslogin { # from file /etc/freeradius/3.0/sites-enabled/adminslogin
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server adminslogin
server aplicaciones { # from file /etc/freeradius/3.0/sites-enabled/aplicaciones
# Loading authenticate {...}
# Loading authorize {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server aplicaciones
server eduroam { # from file /etc/freeradius/3.0/sites-enabled/eduroam
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading pre-proxy {...}
# Loading post-proxy {...}
# Loading post-auth {...}
} # server eduroam
server buffered-sql-eduroam { # from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
# Loading preacct {...}
# Loading accounting {...}
} # server buffered-sql-eduroam
server status { # from file /etc/freeradius/3.0/sites-enabled/status
# Loading authorize {...}
} # server status
server vpn { # from file /etc/freeradius/3.0/sites-enabled/vpn
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server vpn
server eduroam-inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/eduroam-inner-tunnel
# Loading authenticate {...}
# Loading authorize {...}
# Loading post-auth {...}
} # server eduroam-inner-tunnel
server eduroam-rediris { # from file /etc/freeradius/3.0/sites-enabled/eduroam-rediris
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading pre-proxy {...}
# Loading post-proxy {...}
# Loading post-auth {...}
} # server eduroam-rediris
server eduroam-rediris-inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/eduroam-rediris-inner-tunnel
# Loading authenticate {...}
# Loading authorize {...}
# Loading post-auth {...}
} # server eduroam-rediris-inner-tunnel
server monitorum { # from file /etc/freeradius/3.0/sites-enabled/monitorum
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading pre-proxy {...}
# Loading post-proxy {...}
# Loading post-auth {...}
} # server monitorum
server ecopas { # from file /etc/freeradius/3.0/sites-enabled/ecopas
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server ecopas
server puestosoc { # from file /etc/freeradius/3.0/sites-enabled/puestosoc
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server puestosoc
radiusd: #### Opening IP addresses and Ports ####
listen {
type = "proxy"
ipaddr = *
port = 0
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
listen {
type = "acct"
ipaddr = *
port = 0
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
listen {
type = "auth"
ipaddr = *
port = 0
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
listen {
type = "control"
listen {
socket = "/var/run/freeradius/freeradius.sock"
uid = "freerad"
gid = "freerad"
mode = "rw"
peercred = yes
}
}
listen {
type = "detail"
listen {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_sql"
load_factor = 10
poll_interval = 1
retry_interval = 30
one_shot = no
track = yes
}
}
listen {
type = "status"
ipaddr = *
port = 18121
client monitorum_nyctalus21 {
ipaddr = 155.54.212.28
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitorum_nyctalus21"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client admin {
ipaddr = 127.0.0.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "admin"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client monitorum_nyctalus3x {
ipaddr = 155.54.212.48/29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitorum_nyctalus3x"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client nyctalus20 {
ipaddr = 155.54.212.29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "nyctalus20"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
}
Listening on proxy address * port 0
Listening on acct address * port 1813
Listening on auth address * port 1812
Listening on command file /var/run/freeradius/freeradius.sock
Listening on detail file /var/log/freeradius/radacct/eduroam/eduroam_sql as server buffered-sql-eduroam
Listening on status address * port 18121 bound to server status
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.040066 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.153053 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.761408 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.198479 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.188927 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.072417 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.778860 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.111197 sec
(0) Received Accounting-Request Id 113 from 127.0.0.1:11356 to 127.0.0.1:1813 length 181
(0) User-Name = "angel.luis at um.es"
(0) NAS-Port = 10000
(0) Framed-Protocol = PPP
(0) Framed-IP-Address = 155.54.193.215
(0) Acct-Status-Type = Start
(0) Acct-Authentic = RADIUS
(0) Called-Station-Id = "155.54.213.5"
(0) Calling-Station-Id = "37.230.65.41"
(0) Acct-Delay-Time = 2
(0) Acct-Session-Id = "E56018E0"
(0) Acct-Authentic = RADIUS
(0) NAS-Port-Type = Virtual
(0) Tunnel-Client-Endpoint:0 = "37.230.65.41"
(0) ASA-TunnelGroupName = "rpvum"
(0) ASA-ClientType = Cisco-VPN-Client-IKEv1
(0) ASA-SessionType = Cisco-VPN-Client/IKEv1
(0) NAS-IP-Address = 127.0.0.1
(0) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/vpn
(0) preacct {
(0) suffix: Checking for suffix after "@"
(0) suffix: Looking up realm "um.es" for User-Name = "angel.luis at um.es"
(0) suffix: Found realm "um.es"
(0) suffix: Adding Stripped-User-Name = "angel.luis"
(0) suffix: Adding Realm = "um.es"
(0) suffix: Accounting realm is LOCAL
(0) [suffix] = ok
(0) } # preacct = ok
(0) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/vpn
(0) accounting {
(0) update request {
(0) X-Atica-Service = "vpn"
(0) X-Atica-Service-Filter = "vpn"
(0) } # update request = noop
(0) vpn_log: EXPAND /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d
(0) vpn_log: --> /var/log/freeradius/radacct/vpn/vpn_log-20201113
(0) vpn_log: /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d expands to /var/log/freeradius/radacct/vpn/vpn_log-20201113
(0) vpn_log: EXPAND %t
(0) vpn_log: --> Fri Nov 13 10:00:47 2020
(0) [vpn_log] = ok
(0) syslog_accounting: EXPAND messages.%{%{Acct-Status-Type}:-unknown}
(0) syslog_accounting: --> messages.Start
(0) syslog_accounting: EXPAND Connect: [%{User-Name}] (Called-Station-Id: %{Called-Station-Id}, Calling-Station-Id: %{Calling-Station-Id}, IP: %{%{Framed-IP-Address}:-unknown}, X-Atica-Service: %{%{X-Atica-Service}:-unknown})
(0) syslog_accounting: --> Connect: [angel.luis at um.es] (Called-Station-Id: 155.54.213.5, Calling-Station-Id: 37.230.65.41, IP: 155.54.193.215, X-Atica-Service: vpn)
(0) [syslog_accounting] = ok
(0) sql_log_um: EXPAND /var/log/freeradius/radacct/eduroam/eduroam_sql
(0) sql_log_um: --> /var/log/freeradius/radacct/eduroam/eduroam_sql
(0) sql_log_um: /var/log/freeradius/radacct/eduroam/eduroam_sql expands to /var/log/freeradius/radacct/eduroam/eduroam_sql
(0) sql_log_um: EXPAND %t
(0) sql_log_um: --> Fri Nov 13 10:00:47 2020
(0) [sql_log_um] = ok
(0) pool_vpn: This is not an Accounting-Stop
(0) [pool_vpn] = noop
(0) pool_vpn_alu: This is not an Accounting-Stop
(0) [pool_vpn_alu] = noop
(0) pool_vpn_avanttic: This is not an Accounting-Stop
(0) [pool_vpn_avanttic] = noop
(0) pool_vpn_gnoss: This is not an Accounting-Stop
(0) [pool_vpn_gnoss] = noop
(0) pool_vpn_izertis: This is not an Accounting-Stop
(0) [pool_vpn_izertis] = noop
(0) pool_vpn_ext_pas: This is not an Accounting-Stop
(0) [pool_vpn_ext_pas] = noop
(0) pool_vpn_ingenia: This is not an Accounting-Stop
(0) [pool_vpn_ingenia] = noop
rlm_sql (sql_pool): Reserved connection (0)
(0) sqlippool: EXPAND %{User-Name}
(0) sqlippool: --> angel.luis at um.es
(0) sqlippool: SQL-User-Name set to 'angel.luis at um.es'
(0) sqlippool: EXPAND START TRANSACTION
(0) sqlippool: --> START TRANSACTION
(0) sqlippool: Executing query: START TRANSACTION
(0) sqlippool: EXPAND UPDATE radippool SET reason = 'start_update', expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{NAS-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'
(0) sqlippool: --> UPDATE radippool SET reason = 'start_update', expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '127.0.0.1' AND pool_key = '10000' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.193.215'
(0) sqlippool: Executing query: UPDATE radippool SET reason = 'start_update', expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '127.0.0.1' AND pool_key = '10000' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.193.215'
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(0) sqlippool: EXPAND COMMIT
(0) sqlippool: --> COMMIT
(0) sqlippool: Executing query: COMMIT
rlm_sql (sql_pool): Released connection (0)
(0) [sqlippool] = ok
(0) } # accounting = ok
(0) Sent Accounting-Response Id 113 from 127.0.0.1:1813 to 127.0.0.1:11356 length 0
(0) Finished request
(0) Cleaning up request packet ID 113 with timestamp +8
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Renaming /var/log/freeradius/radacct/eduroam/eduroam_sql -> /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
User-Name = "angel.luis at um.es"
NAS-Port = 10000
Framed-Protocol = PPP
Framed-IP-Address = 155.54.193.215
Acct-Status-Type = Start
Acct-Authentic = RADIUS
Called-Station-Id = "155.54.213.5"
Calling-Station-Id = "37.230.65.41"
Acct-Delay-Time = 3
Acct-Session-Id = "E56018E0"
Acct-Authentic = RADIUS
NAS-Port-Type = Virtual
Tunnel-Client-Endpoint:0 = "37.230.65.41"
ASA-TunnelGroupName = "rpvum"
ASA-ClientType = Cisco-VPN-Client-IKEv1
ASA-SessionType = Cisco-VPN-Client/IKEv1
NAS-IP-Address = 127.0.0.1
Stripped-User-Name = "angel.luis"
Realm = "um.es"
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 13 2020 10:00:47 CET"
Packet-Transmit-Counter = 1
(1) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(1) preacct {
(1) [preprocess] = ok
(1) policy acct_unique {
(1) update request {
(1) &Tmp-String-9 := "ai:"
(1) } # update request = noop
(1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(1) EXPAND %{hex:&Class}
(1) -->
(1) EXPAND ^%{hex:&Tmp-String-9}
(1) --> ^61693a
(1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(1) else {
(1) update request {
(1) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(1) --> c1b49417a61b05b2eabb1c8fc5475e6a
(1) &Acct-Unique-Session-Id := c1b49417a61b05b2eabb1c8fc5475e6a
(1) } # update request = noop
(1) } # else = noop
(1) } # policy acct_unique = noop
(1) } # preacct = ok
(1) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(1) accounting {
(1) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(1) sql: --> type.start.query
(1) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(1) sql: EXPAND %{User-Name}
(1) sql: --> angel.luis at um.es
(1) sql: SQL-User-Name set to 'angel.luis at um.es'
(1) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')
(1) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('E56018E0', 'c1b49417a61b05b2eabb1c8fc5475e6a', 'angel.luis at um.es', 'um.es', '127.0.0.1', '10000', 'Virtual', FROM_UNIXTIME(1605258045), FROM_UNIXTIME(1605258045), NULL, '0', 'RADIUS', '', '', '0', '0', '155.54.213.5', '37.230.65.41', '', 'Framed-User', 'PPP', '155.54.193.215')
(1) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('E56018E0', 'c1b49417a61b05b2eabb1c8fc5475e6a', 'angel.luis at um.es', 'um.es', '127.0.0.1', '10000', 'Virtual', FROM_UNIXTIME(1605258045), FROM_UNIXTIME(1605258045), NULL, '0', 'RADIUS', '', '', '0', '0', '155.54.213.5', '37.230.65.41', '', 'Framed-User', 'PPP', '155.54.193.215')
(1) sql: SQL query returned: success
(1) sql: 1 record(s) updated
rlm_sql (sql): Released connection (0)
(1) [sql] = ok
(1) } # accounting = ok
(1) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Done Accounting-Request packet.
(1) Finished request
(1) Cleaning up request packet ID 0 with timestamp +9
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Unlinking /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.055641 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.207814 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.934012 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.193603 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.770652 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.029301 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.135319 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.248744 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.174566 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.002199 sec
(2) Received Accounting-Request Id 43 from 127.0.0.1:18963 to 127.0.0.1:1813 length 63
(2) Acct-Status-Type = Accounting-On
(2) NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
(2) Acct-Delay-Time = 0
(2) NAS-IP-Address = 155.54.213.6
(2) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/vpn
(2) preacct {
(2) [suffix] = noop
(2) } # preacct = noop
(2) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/vpn
(2) accounting {
(2) update request {
(2) X-Atica-Service = "vpn"
(2) X-Atica-Service-Filter = "vpn"
(2) } # update request = noop
(2) vpn_log: EXPAND /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d
(2) vpn_log: --> /var/log/freeradius/radacct/vpn/vpn_log-20201113
(2) vpn_log: /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d expands to /var/log/freeradius/radacct/vpn/vpn_log-20201113
(2) vpn_log: EXPAND %t
(2) vpn_log: --> Fri Nov 13 10:00:58 2020
(2) [vpn_log] = ok
(2) syslog_accounting: EXPAND messages.%{%{Acct-Status-Type}:-unknown}
(2) syslog_accounting: --> messages.Accounting-On
(2) syslog_accounting: EXPAND NAS %{Packet-Src-IP-Address} (%{NAS-IP-Address}) just came online
(2) syslog_accounting: --> NAS 127.0.0.1 (155.54.213.6) just came online
(2) [syslog_accounting] = ok
(2) sql_log_um: EXPAND /var/log/freeradius/radacct/eduroam/eduroam_sql
(2) sql_log_um: --> /var/log/freeradius/radacct/eduroam/eduroam_sql
(2) sql_log_um: /var/log/freeradius/radacct/eduroam/eduroam_sql expands to /var/log/freeradius/radacct/eduroam/eduroam_sql
(2) sql_log_um: EXPAND %t
(2) sql_log_um: --> Fri Nov 13 10:00:58 2020
(2) [sql_log_um] = ok
(2) pool_vpn: This is not an Accounting-Stop
(2) [pool_vpn] = noop
(2) pool_vpn_alu: This is not an Accounting-Stop
(2) [pool_vpn_alu] = noop
(2) pool_vpn_avanttic: This is not an Accounting-Stop
(2) [pool_vpn_avanttic] = noop
(2) pool_vpn_gnoss: This is not an Accounting-Stop
(2) [pool_vpn_gnoss] = noop
(2) pool_vpn_izertis: This is not an Accounting-Stop
(2) [pool_vpn_izertis] = noop
(2) pool_vpn_ext_pas: This is not an Accounting-Stop
(2) [pool_vpn_ext_pas] = noop
(2) pool_vpn_ingenia: This is not an Accounting-Stop
(2) [pool_vpn_ingenia] = noop
rlm_sql (sql_pool): Reserved connection (0)
(2) sqlippool: EXPAND %{User-Name}
(2) sqlippool: -->
(2) sqlippool: SQL-User-Name set to ''
(2) sqlippool: EXPAND START TRANSACTION
(2) sqlippool: --> START TRANSACTION
(2) sqlippool: Executing query: START TRANSACTION
(2) sqlippool: EXPAND UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'on_clear', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'
(2) sqlippool: --> UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'on_clear', expiry_time = NULL WHERE nasipaddress = '155.54.213.6'
(2) sqlippool: Executing query: UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'on_clear', expiry_time = NULL WHERE nasipaddress = '155.54.213.6'
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(2) sqlippool: EXPAND COMMIT
(2) sqlippool: --> COMMIT
(2) sqlippool: Executing query: COMMIT
rlm_sql (sql_pool): Released connection (0)
(2) [sqlippool] = ok
(2) } # accounting = ok
(2) Sent Accounting-Response Id 43 from 127.0.0.1:1813 to 127.0.0.1:18963 length 0
(2) Finished request
(2) Cleaning up request packet ID 43 with timestamp +19
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Renaming /var/log/freeradius/radacct/eduroam/eduroam_sql -> /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 1
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 13 2020 10:00:58 CET"
Packet-Transmit-Counter = 1
(3) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(3) preacct {
(3) [preprocess] = ok
(3) policy acct_unique {
(3) update request {
(3) &Tmp-String-9 := "ai:"
(3) } # update request = noop
(3) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(3) EXPAND %{hex:&Class}
(3) -->
(3) EXPAND ^%{hex:&Tmp-String-9}
(3) --> ^61693a
(3) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(3) else {
(3) update request {
(3) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(3) --> 81a332593e1a33c892e582753ceec582
(3) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(3) } # update request = noop
(3) } # else = noop
(3) } # policy acct_unique = noop
(3) } # preacct = ok
(3) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(3) accounting {
(3) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(3) sql: --> type.accounting-on.query
(3) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(3) sql: EXPAND %{User-Name}
(3) sql: -->
(3) sql: SQL-User-Name set to ''
(3) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(3) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1605258058), acctsessiontime = '1605258058' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1605258058)
(3) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1605258058), acctsessiontime = '1605258058' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1605258058)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(3) sql: SQL query returned: success
(3) sql: 0 record(s) updated
(3) sql: Trying next query...
(3) sql: EXPAND SELECT true
(3) sql: --> SELECT true
(3) sql: Executing query: SELECT true
(3) sql: SQL query returned: success
(3) sql: -1 record(s) updated
(3) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(3) [sql] = noop
(3) } # accounting = noop
(3) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): No response to request. Will retry in 30 seconds
(3) Finished request
(3) Cleaning up request packet ID 1 with timestamp +20
Ready to process requests
(4) Received Accounting-Request Id 252 from 127.0.0.1:39046 to 127.0.0.1:1813 length 242
(4) Service-Type = Framed-User
(4) Framed-Protocol = PPP
(4) NAS-Port = 10000
(4) NAS-Port-Type = Virtual
(4) User-Name = "angel.luis at um.es"
(4) Calling-Station-Id = "37.230.65.41"
(4) Called-Station-Id = "155.54.213.5"
(4) MS-CHAP-Domain = "um.es"
(4) Acct-Session-Id = "85c00002"
(4) Framed-IP-Address = 155.54.193.215
(4) Acct-Authentic = RADIUS
(4) Event-Timestamp = "Nov 10 2020 07:32:37 CET"
(4) Acct-Session-Time = 195
(4) Idle-Timeout = 0
(4) Session-Timeout = 0
(4) Acct-Input-Octets = 935521
(4) Acct-Input-Gigawords = 0
(4) Acct-Input-Packets = 6700
(4) Acct-Output-Octets = 5808531
(4) Acct-Output-Gigawords = 0
(4) Acct-Output-Packets = 8576
(4) Acct-Status-Type = Stop
(4) Acct-Terminate-Cause = User-Request
(4) NAS-Identifier = "MikroTik-CCR-VPN-1"
(4) Acct-Delay-Time = 0
(4) Mikrotik-Realm = "um.es"
(4) NAS-IP-Address = 127.0.0.1
(4) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/vpn
(4) preacct {
(4) suffix: Checking for suffix after "@"
(4) suffix: Looking up realm "um.es" for User-Name = "angel.luis at um.es"
(4) suffix: Found realm "um.es"
(4) suffix: Adding Stripped-User-Name = "angel.luis"
(4) suffix: Adding Realm = "um.es"
(4) suffix: Accounting realm is LOCAL
(4) [suffix] = ok
(4) } # preacct = ok
(4) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/vpn
(4) accounting {
(4) update request {
(4) X-Atica-Service = "vpn"
(4) X-Atica-Service-Filter = "vpn"
(4) } # update request = noop
(4) vpn_log: EXPAND /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d
(4) vpn_log: --> /var/log/freeradius/radacct/vpn/vpn_log-20201113
(4) vpn_log: /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d expands to /var/log/freeradius/radacct/vpn/vpn_log-20201113
(4) vpn_log: EXPAND %t
(4) vpn_log: --> Fri Nov 13 10:01:25 2020
(4) [vpn_log] = ok
(4) syslog_accounting: EXPAND messages.%{%{Acct-Status-Type}:-unknown}
(4) syslog_accounting: --> messages.Stop
(4) syslog_accounting: EXPAND Disconnect: [%{User-Name}] (Called-Station-Id: %{Called-Station-Id}, Calling-Station-Id: %{Calling-Station-Id}, IP: %{%{Framed-IP-Address}:-unknown}, X-Atica-Service: %{%{X-Atica-Service}:-unknown}, Time: %{Acct-Session-Time} seconds)
(4) syslog_accounting: --> Disconnect: [angel.luis at um.es] (Called-Station-Id: 155.54.213.5, Calling-Station-Id: 37.230.65.41, IP: 155.54.193.215, X-Atica-Service: vpn, Time: 195 seconds)
(4) [syslog_accounting] = ok
(4) sql_log_um: EXPAND /var/log/freeradius/radacct/eduroam/eduroam_sql
(4) sql_log_um: --> /var/log/freeradius/radacct/eduroam/eduroam_sql
(4) sql_log_um: /var/log/freeradius/radacct/eduroam/eduroam_sql expands to /var/log/freeradius/radacct/eduroam/eduroam_sql
(4) sql_log_um: EXPAND %t
(4) sql_log_um: --> Fri Nov 13 10:01:25 2020
(4) [sql_log_um] = ok
(4) pool_vpn: EXPAND %{NAS-IP-Address} %{Calling-Station-Id}
(4) pool_vpn: --> 127.0.0.1 37.230.65.41
(4) pool_vpn: MD5 on 'key' directive maps to: 1af911d78b21b37ba10b86e0fe683b92
(4) pool_vpn: Searching for an entry for key: '127.0.0.1 37.230.65.41'
(4) pool_vpn: Entry not found
(4) [pool_vpn] = notfound
(4) pool_vpn_alu: EXPAND %{NAS-IP-Address} %{Calling-Station-Id}
(4) pool_vpn_alu: --> 127.0.0.1 37.230.65.41
(4) pool_vpn_alu: MD5 on 'key' directive maps to: 1af911d78b21b37ba10b86e0fe683b92
(4) pool_vpn_alu: Searching for an entry for key: '127.0.0.1 37.230.65.41'
(4) pool_vpn_alu: Entry not found
(4) [pool_vpn_alu] = notfound
(4) pool_vpn_avanttic: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(4) pool_vpn_avanttic: --> 127.0.0.1 37.230.65.41 angel.luis at um.es
(4) pool_vpn_avanttic: MD5 on 'key' directive maps to: a8bc3bbe36501c48b702634a19b8c395
(4) pool_vpn_avanttic: Searching for an entry for key: '127.0.0.1 37.230.65.41 angel.luis at um.es'
(4) pool_vpn_avanttic: Entry not found
(4) [pool_vpn_avanttic] = notfound
(4) pool_vpn_gnoss: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(4) pool_vpn_gnoss: --> 127.0.0.1 37.230.65.41 angel.luis at um.es
(4) pool_vpn_gnoss: MD5 on 'key' directive maps to: a8bc3bbe36501c48b702634a19b8c395
(4) pool_vpn_gnoss: Searching for an entry for key: '127.0.0.1 37.230.65.41 angel.luis at um.es'
(4) pool_vpn_gnoss: Entry not found
(4) [pool_vpn_gnoss] = notfound
(4) pool_vpn_izertis: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(4) pool_vpn_izertis: --> 127.0.0.1 37.230.65.41 angel.luis at um.es
(4) pool_vpn_izertis: MD5 on 'key' directive maps to: a8bc3bbe36501c48b702634a19b8c395
(4) pool_vpn_izertis: Searching for an entry for key: '127.0.0.1 37.230.65.41 angel.luis at um.es'
(4) pool_vpn_izertis: Entry not found
(4) [pool_vpn_izertis] = notfound
(4) pool_vpn_ext_pas: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(4) pool_vpn_ext_pas: --> 127.0.0.1 37.230.65.41 angel.luis at um.es
(4) pool_vpn_ext_pas: MD5 on 'key' directive maps to: a8bc3bbe36501c48b702634a19b8c395
(4) pool_vpn_ext_pas: Searching for an entry for key: '127.0.0.1 37.230.65.41 angel.luis at um.es'
(4) pool_vpn_ext_pas: Entry not found
(4) [pool_vpn_ext_pas] = notfound
(4) pool_vpn_ingenia: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(4) pool_vpn_ingenia: --> 127.0.0.1 37.230.65.41 angel.luis at um.es
(4) pool_vpn_ingenia: MD5 on 'key' directive maps to: a8bc3bbe36501c48b702634a19b8c395
(4) pool_vpn_ingenia: Searching for an entry for key: '127.0.0.1 37.230.65.41 angel.luis at um.es'
(4) pool_vpn_ingenia: Entry not found
(4) [pool_vpn_ingenia] = notfound
rlm_sql (sql_pool): Reserved connection (0)
(4) sqlippool: EXPAND %{User-Name}
(4) sqlippool: --> angel.luis at um.es
(4) sqlippool: SQL-User-Name set to 'angel.luis at um.es'
(4) sqlippool: EXPAND START TRANSACTION
(4) sqlippool: --> START TRANSACTION
(4) sqlippool: Executing query: START TRANSACTION
(4) sqlippool: EXPAND UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'stop_clear', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'
(4) sqlippool: --> UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'stop_clear', expiry_time = NULL WHERE nasipaddress = '127.0.0.1' AND pool_key = '10000' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.193.215'
(4) sqlippool: Executing query: UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', reason = 'stop_clear', expiry_time = NULL WHERE nasipaddress = '127.0.0.1' AND pool_key = '10000' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.193.215'
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(4) sqlippool: EXPAND COMMIT
(4) sqlippool: --> COMMIT
(4) sqlippool: Executing query: COMMIT
(4) sqlippool: EXPAND Released IP Framed-IP-Address (did %{Called-Station-Id} cli %{Calling-Station-Id} user %{User-Name})
(4) sqlippool: --> Released IP Framed-IP-Address (did 155.54.213.5 cli 37.230.65.41 user angel.luis at um.es)
rlm_sql (sql_pool): Released connection (0)
(4) [sqlippool] = ok
(4) } # accounting = ok
(4) Sent Accounting-Response Id 252 from 127.0.0.1:1813 to 127.0.0.1:39046 length 0
(4) Finished request
(4) Cleaning up request packet ID 252 with timestamp +46
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 31
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 13 2020 10:00:58 CET"
Packet-Transmit-Counter = 2
(5) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(5) preacct {
(5) [preprocess] = ok
(5) policy acct_unique {
(5) update request {
(5) &Tmp-String-9 := "ai:"
(5) } # update request = noop
(5) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(5) EXPAND %{hex:&Class}
(5) -->
(5) EXPAND ^%{hex:&Tmp-String-9}
(5) --> ^61693a
(5) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(5) else {
(5) update request {
(5) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(5) --> 81a332593e1a33c892e582753ceec582
(5) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(5) } # update request = noop
(5) } # else = noop
(5) } # policy acct_unique = noop
(5) } # preacct = ok
(5) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(5) accounting {
(5) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(5) sql: --> type.accounting-on.query
(5) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(5) sql: EXPAND %{User-Name}
(5) sql: -->
(5) sql: SQL-User-Name set to ''
(5) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(5) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1605258058), acctsessiontime = '1605258058' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1605258058)
(5) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1605258058), acctsessiontime = '1605258058' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1605258058)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(5) sql: SQL query returned: success
(5) sql: 0 record(s) updated
(5) sql: Trying next query...
(5) sql: EXPAND SELECT true
(5) sql: --> SELECT true
(5) sql: Executing query: SELECT true
(5) sql: SQL query returned: success
(5) sql: -1 record(s) updated
(5) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(5) [sql] = noop
(5) } # accounting = noop
(5) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): No response to request. Will retry in 30 seconds
(5) Finished request
(5) Cleaning up request packet ID 1 with timestamp +50
Ready to process requests
-------------- next part --------------
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 0
NAS-IP-Address = 155.54.213.6
-------------- next part --------------
User-Name = angel.luis at um.es
NAS-Port = 10000
Framed-Protocol = PPP
Framed-IP-Address = "155.54.193.215"
Acct-Status-Type = Start
Acct-Authentic = RADIUS
Called-Station-Id = "155.54.213.5"
Calling-Station-Id = "37.230.65.41"
Acct-Delay-Time = 2
Acct-Session-Id = "E56018E0"
Acct-Authentic = RADIUS
NAS-Port-Type = Virtual
Tunnel-Client-Endpoint:0 = "37.230.65.41"
ASA-TunnelGroupName = "rpvum"
ASA-ClientType = Cisco-VPN-Client-IKEv1
ASA-SessionType = Cisco-VPN-Client/IKEv1
NAS-IP-Address = 127.0.0.1
Stripped-User-Name = "angel.luis"
Realm = "um.es"
-------------- next part --------------
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 10000
NAS-Port-Type = Virtual
User-Name = "angel.luis at um.es"
Calling-Station-Id = "37.230.65.41"
Called-Station-Id = "155.54.213.5"
MS-CHAP-Domain = "um.es"
Acct-Session-Id = "85c00002"
Framed-IP-Address = 155.54.193.215
Acct-Authentic = RADIUS
Event-Timestamp = "Nov 10 2020 07:32:37 CET"
Acct-Session-Time = 195
Idle-Timeout = 0
Session-Timeout = 0
Acct-Input-Octets = 935521
Acct-Input-Gigawords = 0
Acct-Input-Packets = 6700
Acct-Output-Octets = 5808531
Acct-Output-Gigawords = 0
Acct-Output-Packets = 8576
Acct-Status-Type = Stop
Acct-Terminate-Cause = User-Request
NAS-Identifier = "MikroTik-CCR-VPN-1"
Acct-Delay-Time = 0
Mikrotik-Realm = "um.es"
NAS-IP-Address = 127.0.0.1
Stripped-User-Name = "angel.luis"
Realm = "um.es"
More information about the Freeradius-Users
mailing list